Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
File: 435CoUa5C6fNMxrWoT7vHaL7pEA.mft (raw, json)
Hash identifier: gCfYb/j+cT/ynjkTryt/PXQOxFrjN3kJVVveEHBPuqg=
Subject key identifier: A2:9C:02:D4:5C:05:44:D0:C3:7B:12:EA:07:7A:AA:5F:EF:68:12:9B
Authority key identifier: E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
Certificate issuer: /CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Certificate serial: 01A1DEA7C357F87B186A1FCE4ED24C2891F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
Manifest number: 0D04
Signing time: Sun 15 Nov 2026 10:01:38 +0000
Manifest this update: Sun 15 Nov 2026 10:01:38 +0000
Manifest next update: Mon 16 Nov 2026 10:01:38 +0000
Files and hashes: 1: 435CoUa5C6fNMxrWoT7vHaL7pEA.crl (hash: WfCa94HH500A1QfhbEYLxdv9PZeOmijCZsV9kD0VmvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:c3:57:f8:7b:18:6a:1f:ce:4e:d2:4c:28:91:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37e42a146b90ba7cd331ad6a13eef1da2fba440
Validity
Not Before: Nov 15 10:01:38 2026 GMT
Not After : Nov 16 10:01:38 2026 GMT
Subject: CN=a29c02d45c0544d0c37b12ea077aaa5fef68129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:49:45:18:87:74:1e:9d:89:84:3c:62:48:
76:89:62:f7:31:de:0e:fb:80:34:c4:fa:8d:27:25:
43:4a:c3:cc:3d:d7:9a:bb:ba:59:61:65:ac:31:72:
f9:9c:95:2a:a5:de:da:40:f9:e7:00:e8:42:97:ab:
5c:4c:51:21:ed:ea:b2:87:27:3f:b7:b9:6c:96:cf:
c4:8c:01:35:29:2f:64:20:c8:52:d6:f6:6b:4a:78:
36:14:c9:0c:86:7c:51:ce:c8:e7:f7:73:d5:3d:e8:
97:eb:6b:60:9d:d0:37:d6:d1:cb:d3:df:ad:28:3e:
6a:6f:8f:eb:ce:6f:8e:53:23:61:14:34:2f:9a:89:
02:5f:34:a7:64:74:c4:4d:ea:7f:b5:03:30:66:a6:
96:0e:28:0c:76:bd:bd:b4:5c:60:47:f9:9f:51:c9:
c2:c9:2c:60:08:da:b1:9d:05:68:7b:c7:e5:08:a9:
f4:5d:9a:22:f9:e3:4a:e4:d4:e7:dc:02:69:58:fe:
38:a1:ae:a7:e1:f7:8f:e6:a0:cd:af:6b:c2:bd:96:
18:dd:ce:79:f5:fc:36:9e:c0:b8:ad:14:4f:eb:98:
6f:aa:95:07:4c:c0:72:34:e7:7f:d0:1d:ef:b5:91:
65:45:50:7c:0e:3c:54:ee:c9:ba:28:4b:ae:22:ad:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9C:02:D4:5C:05:44:D0:C3:7B:12:EA:07:7A:AA:5F:EF:68:12:9B
X509v3 Authority Key Identifier:
keyid:E3:7E:42:A1:46:B9:0B:A7:CD:33:1A:D6:A1:3E:EF:1D:A2:FB:A4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/435CoUa5C6fNMxrWoT7vHaL7pEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3ece76-0575-46b1-94bf-06329f6e0475/1/435CoUa5C6fNMxrWoT7vHaL7pEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:83:93:c8:e7:89:23:76:d2:14:cd:da:0c:77:5b:af:97:c0:
05:81:38:2b:bc:5d:b1:60:1f:ec:34:28:41:ff:25:5b:b1:a9:
8d:8e:86:d8:5b:78:ac:b1:91:96:7f:80:42:39:2d:80:af:d4:
a8:5d:94:0d:8f:09:bd:2d:79:d0:7f:c3:2f:32:e9:8c:cf:03:
04:c6:b5:38:28:a8:84:3c:d6:67:d7:49:c6:76:3c:b5:52:04:
9b:ff:73:e8:43:d6:ea:0e:cc:a4:3e:eb:1d:23:75:ca:d8:4b:
96:6f:5a:a9:de:79:aa:84:ea:51:6d:20:b4:7a:b3:f4:82:e5:
64:2c:85:b0:04:d4:87:d7:fb:df:e5:ce:fd:76:da:9b:ae:45:
73:e1:18:36:c4:b5:bf:2a:e7:96:8b:e0:e1:5f:5a:cd:45:41:
79:f3:4f:93:64:19:86:ed:f5:a3:37:71:21:31:d8:e5:ee:84:
43:af:0a:b1:0b:4c:c8:d2:0a:97:4c:2c:66:ac:d2:0c:fd:f5:
6a:59:e8:62:e0:27:86:78:39:a9:67:f7:08:6e:2d:5c:c4:ca:
b3:1a:5a:b5:ef:0f:e5:ff:8f:40:69:6b:b8:63:74:46:c0:be:
89:d3:51:1e:e3:6d:af:7a:e8:db:13:ba:7a:4c:b5:f3:11:fe:
bd:26:ac:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:51 2026 by rpki-client